Overview
overview
3Static
static
161gaez.rar
windows10-2004-x64
161gaez.rar
windows11-ltsc_2024-x64
1roblox-ext.slnx
windows10-2004-x64
3roblox-ext.slnx
windows11-ltsc_2024-x64
3roblox-ext...core.h
windows10-2004-x64
3roblox-ext...core.h
windows11-ltsc_2024-x64
3roblox-ext...gine.h
windows10-2004-x64
3roblox-ext...gine.h
windows11-ltsc_2024-x64
3roblox-ext...port.h
windows10-2004-x64
3roblox-ext...port.h
windows11-ltsc_2024-x64
3roblox-ext...pper.h
windows10-2004-x64
3roblox-ext...pper.h
windows11-ltsc_2024-x64
3roblox-ext...wski.h
windows10-2004-x64
3roblox-ext...wski.h
windows11-ltsc_2024-x64
3roblox-ext...fset.h
windows10-2004-x64
3roblox-ext...fset.h
windows11-ltsc_2024-x64
3roblox-ext...clip.h
windows10-2004-x64
3roblox-ext...clip.h
windows11-ltsc_2024-x64
3roblox-ext...sion.h
windows10-2004-x64
3roblox-ext...sion.h
windows11-ltsc_2024-x64
3roblox-ext...ne.cpp
windows10-2004-x64
3roblox-ext...ne.cpp
windows11-ltsc_2024-x64
3roblox-ext...et.cpp
windows10-2004-x64
3roblox-ext...et.cpp
windows11-ltsc_2024-x64
3roblox-ext...ip.cpp
windows10-2004-x64
3roblox-ext...ip.cpp
windows11-ltsc_2024-x64
3roblox-ext...he.cpp
windows10-2004-x64
3roblox-ext...he.cpp
windows11-ltsc_2024-x64
3roblox-ext...ache.h
windows10-2004-x64
3roblox-ext...ache.h
windows11-ltsc_2024-x64
3roblox-ext...ot.cpp
windows10-2004-x64
3roblox-ext...ot.cpp
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/08/2026, 04:15
Static task
static1
Behavioral task
behavioral1
Sample
61gaez.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
61gaez.rar
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
roblox-ext.slnx
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
roblox-ext.slnx
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.core.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.core.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.engine.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.engine.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.export.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.export.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.minkowski.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.minkowski.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.offset.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.offset.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.rectclip.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.rectclip.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.version.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
roblox-ext/Clipper2Lib/include/clipper2/clipper.version.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
roblox-ext/Clipper2Lib/src/clipper.engine.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
roblox-ext/Clipper2Lib/src/clipper.engine.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
roblox-ext/Clipper2Lib/src/clipper.offset.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
roblox-ext/Clipper2Lib/src/clipper.offset.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
roblox-ext/Clipper2Lib/src/clipper.rectclip.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
roblox-ext/Clipper2Lib/src/clipper.rectclip.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
roblox-ext/cache/cache.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
roblox-ext/cache/cache.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
roblox-ext/cache/cache.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
roblox-ext/cache/cache.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
roblox-ext/features/aimbot/aimbot.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
roblox-ext/features/aimbot/aimbot.cpp
Resource
win11ltsc2024-20260709-en
General
- Target 61gaez.rar
- Size 22.4MB
- Sample260805-evesqaxhpb
- SHA256 1bd03a1b6d0a14ff04a58c7781ae2ef1b70f52623730fd45487f8174cf2e60a8
- MD5 3646a709d21f77bd1c2a97fca216440d
- SHA1 9c6d3e969ff32c62f1737e0a9d1ca22b83f0eae2
- SHA512 4e9bd9347f13e638dfd81f605561074e69a65a663941775a8092d879b763cb91bf33bc531d601998864012095a842d971580147613b258ff682fc31960719ad3
- SSDEEP 393216:4Avkw0ezRAGaAcZ35WqE/BsH7m01S55fUcxkN8EHR+UyHx:1vyhBfeBA7rIN3uU1
- TLSH T1AE3733ACBFB0B631301436964D829B82F92B141CC5136B7DECEA6A6365C1E534C5CBDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 6088 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 6088 7zFM.exe Token: 35 6088 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 6088 7zFM.exe